Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/a5c738-3df5-4e02-af31-2b0eab3d3d37/1/grEuz7IvKdYKPjG3nzYt1gwtTBA.mft
File: grEuz7IvKdYKPjG3nzYt1gwtTBA.mft (raw, json)
Hash identifier: WRJupdcUzX41iCyW43lPKBGOOl8rUhj17nIiT0rlwVc=
Subject key identifier: EC:5A:BD:37:D6:FA:3D:A0:7A:33:D1:B6:1D:26:0F:65:20:A2:D5:7C
Authority key identifier: 82:B1:2E:CF:B2:2F:29:D6:0A:3E:31:B7:9F:36:2D:D6:0C:2D:4C:10
Certificate issuer: /CN=82b12ecfb22f29d60a3e31b79f362dd60c2d4c10
Certificate serial: 0194BCA9B0439A836A8F1F0641BAE69650C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/grEuz7IvKdYKPjG3nzYt1gwtTBA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/a5c738-3df5-4e02-af31-2b0eab3d3d37/1/grEuz7IvKdYKPjG3nzYt1gwtTBA.mft
Manifest number: 0BC3
Signing time: Fri 31 Jan 2025 14:00:24 +0000
Manifest this update: Fri 31 Jan 2025 14:00:24 +0000
Manifest next update: Sat 01 Feb 2025 14:00:24 +0000
Files and hashes: 1: 1-q5t5dbXJQJPAbEiSYfDN9-Kp_0.roa (hash: jh5W+EA/au2yjcrCCgbD+iZSjQ/AqIbIhccnO7LERWE=)
2: grEuz7IvKdYKPjG3nzYt1gwtTBA.crl (hash: UNOGbtbSwpQjRehyXjDIqCWJAMCJ4+TcXFe55n9hk/Q=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:b0:43:9a:83:6a:8f:1f:06:41:ba:e6:96:50:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82b12ecfb22f29d60a3e31b79f362dd60c2d4c10
Validity
Not Before: Jan 31 14:00:24 2025 GMT
Not After : Feb 1 14:00:24 2025 GMT
Subject: CN=ec5abd37d6fa3da07a33d1b61d260f6520a2d57c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:1f:21:ae:f8:2f:4a:45:16:7b:74:42:ad:13:
2b:53:ee:17:9d:f5:e6:50:98:7b:bb:15:1f:41:ea:
4c:6b:f1:a0:0b:a2:99:2e:c0:f9:6c:c1:a3:cb:ac:
d7:21:4c:b4:a7:79:a6:17:04:fc:15:72:cb:3b:e7:
65:b1:77:90:ce:7a:79:ef:18:07:65:10:ad:0a:8e:
07:57:e1:ae:83:ba:ae:39:7f:46:9f:99:51:90:8b:
67:36:a1:67:97:70:ac:70:e5:c6:b8:b0:d5:8e:8a:
b3:7f:6d:90:68:35:6c:91:cf:15:93:41:45:94:bf:
47:85:64:ff:dd:10:37:87:4c:ad:3a:a7:8a:07:ec:
00:a6:94:b2:2c:3b:94:62:4d:99:4e:8a:c2:b8:f6:
0c:a9:29:a2:c3:ba:ac:76:de:a4:6f:dc:63:33:9b:
91:c8:41:1d:49:2b:bf:63:8d:e6:1c:ec:9d:48:be:
e1:05:bf:d9:74:f1:ea:4e:ae:5c:95:1b:26:ae:90:
75:7b:00:6a:eb:11:de:f2:1a:9c:1d:d5:41:df:fc:
d7:bf:47:8d:3f:da:ee:d9:6e:69:91:cd:c2:28:75:
8e:7e:5c:e6:30:d7:07:0d:2c:81:0a:8e:b2:0d:54:
2c:39:de:18:4d:66:6d:59:25:2e:08:63:fb:07:40:
c4:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:5A:BD:37:D6:FA:3D:A0:7A:33:D1:B6:1D:26:0F:65:20:A2:D5:7C
X509v3 Authority Key Identifier:
keyid:82:B1:2E:CF:B2:2F:29:D6:0A:3E:31:B7:9F:36:2D:D6:0C:2D:4C:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/grEuz7IvKdYKPjG3nzYt1gwtTBA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/a5c738-3df5-4e02-af31-2b0eab3d3d37/1/grEuz7IvKdYKPjG3nzYt1gwtTBA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/a5c738-3df5-4e02-af31-2b0eab3d3d37/1/grEuz7IvKdYKPjG3nzYt1gwtTBA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:a9:02:5e:e1:33:eb:51:02:a0:6b:20:2d:00:1b:c0:1a:77:
c9:99:11:86:06:d0:6a:59:96:ff:30:9c:ce:5a:f8:ef:10:6d:
16:ca:47:62:5c:9c:9c:07:da:66:b8:3c:78:4b:6b:24:01:0a:
53:66:9b:25:c4:5e:cc:5d:64:6b:5c:3e:79:6f:fa:c9:28:80:
ab:ee:bd:75:d4:dc:fb:07:51:1d:d0:9f:bd:b0:ca:a4:d2:42:
4d:b4:f6:e4:74:4d:fa:38:e0:e5:64:bb:5a:f1:e2:87:34:fa:
b3:ee:cf:58:f7:d6:38:20:97:b4:a1:a9:2e:96:56:aa:33:3e:
ea:4c:5a:1f:c6:50:5e:b9:21:05:6f:97:94:b6:cc:9a:c6:ac:
90:71:3c:3f:6c:5f:9e:6b:ce:d9:05:2f:a2:30:7a:39:24:88:
d6:9a:91:31:7d:0b:54:ee:66:aa:82:db:9b:ba:f7:ac:5b:9c:
3d:87:28:f7:f2:5c:13:cd:e1:5b:ac:ae:59:9d:11:81:e3:5d:
28:14:b8:08:53:fa:b7:a1:f8:e5:5e:bb:11:aa:f0:7d:32:9c:
c0:3b:1b:ad:2b:55:89:01:be:2e:16:2c:ef:9d:ad:9e:f0:af:
18:24:db:88:4f:59:f6:f8:bb:f9:47:54:13:8c:b9:cf:d2:47:
91:45:ef:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 16:21:17 2025 by rpki-client